| Analytic 1495 - AN1495 (b4a380ed-cc16-47cd-8fe1-44ccf4cad097) |
Analytics |
Registry and LSASS Monitoring for Security Support Provider Abuse - DET0542 (6b47bf45-a3f2-4d4b-884a-3cec3ef3f994) |
Detection Strategies |
1 |
| Registry and LSASS Monitoring for Security Support Provider Abuse - DET0542 (6b47bf45-a3f2-4d4b-884a-3cec3ef3f994) |
Detection Strategies |
Security Support Provider - T1547.005 (5095a853-299c-4876-abd7-ac0050fb5462) |
Attack Pattern |
1 |
| Security Support Provider - T1547.005 (5095a853-299c-4876-abd7-ac0050fb5462) |
Attack Pattern |
Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) |
Attack Pattern |
2 |